linkfox-shopee-store-follow-prize

Warn

Audited by Socket on Jul 16, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: The core Shopee Follow Prize management purpose is plausible, but the skill routes tokens and API traffic through LinkFox’s proxy instead of Shopee directly and introduces transitive trust via other skills and a downloadable ZIP skill. The footprint is broader than necessary for a normal API integration, with medium-high security risk but not confirmed malware.

Confidence: 87%Severity: 76%
Audit Metadata
Analyzed At
Jul 16, 2026, 08:09 AM
Package URL
pkg:socket/skills-sh/linkfox-ai%2Flinkfox-skills%2Flinkfox-shopee-store-follow-prize%2F@97c41ee4d07d380aa0c56ce3b2e94943c0bdd3b7bf00b43211356112a0f887fe